Hacking Coding vWii 3-core support - everything you need to know.

  • Thread starter Thread starter Maxternal
  • Start date Start date
  • Views Views 242,138
  • Replies Replies 1,263
  • Likes Likes 13
I still don't understand if registers for "OHCI0" and "OHCI1" are related to the physical ports. :(
I will just try to read the number of port for each, maybe it will give me an answer !
Thank you for reminding the endianness !
 
delroth
It was a while ago. I tried to port over the usb code from neek to mini and it used dynamic allocated buffers for it's dma transfers.
I stopped working on it because it was no longer needed for my intensions (starting neek from usb without sd card) and also because I got negative feedback from people claiming the mini code should be kept as simple as possible.
 
So if you succeded why don't you share the result ? :dry:
Some people who want to understand will be thankful for sharing...
So basically what you want from marcan...
 
Yeah, that definitely should work by just replacing armboot.c like you said and then changing the /title/00000001/00000200/content/00000003.app file it it pre-loads from NAND to the /title/00000001/00000002/content/00000017.app file for the system menu.

As far as the rebooter, I've only played with resetting to the vWii menu a little bit but maybe you'd know better than I how to get it to load the IOS80 back again when exiting the MINI-mod (armboot) to be able to get back to the system menu. I'm willing to help with whatever I can, though. Let me know how things go with that.

Just to report back...

It works great, I could decrypt not only system menu app file but also of the other BC app files.
Many thanks for great help.

However, I have not been able to spend much of time for testing the rebooter feature yet.
I also use the same approach to be able to run armboot.bin from SNEEK to switch from system NAND on WiiMode.

Cheers.
 
  • Like
Reactions: Ray Lewis
He made a call to the create-key function in the IOSU crypto module, which ended up bricking his Wii U somehow.


Ugh, that sucks, just wondering is all. Anyways, so were do we stand with Linux? I've no idea where we are as far as activating the other cores.
 
About Comex, if you don't mod an ios then isn't it a soft brick? Hidden security? Did it mod that ios? Weird. I'd love to hear details. It would be useful. How could that brick it?!!! Lol, like won't boot type of brick...? I told him he should have backed up his emmc/nand before playing. Like 3ds people do. Raw read/write.

I think credible people should do a guide. There are schematics but I might brick. Marcan and others...childs play to them. Anyone else think this should be a priority? Card reader, I have pin diagrams from wiiubrew and a thread on ps3 mini, and late 360 motherboards. Software, risks, procedure? If an innocent poke did that, you guys run the big risk.
 
Maxternal, because I like you. I don't wanna see you end up like comex. If I were you, I'd ask for a Dolphin member to compile a special dolphin build to support a vWii dump since this thread is focused on vWii.:)
 
Maxternal, because I like you. I don't wanna see you end up like comex. If I were you, I'd ask for a Dolphin member to compile a special dolphin build to support a vWii dump since this thread is focused on vWii.:)


The problem is that Maxternal's work requires Wii U features that are available in vWii mode but not on normal Wii's, like the PowerPC Boot ROM and the 3-core Espresso architecture. These things are not supported by Dolphin, and would take a lot of effort to add.
 
Settle down, lmfao. First rule of threads that are made to inform and discuss a topic is you do not ask. The second rule is to follow internet etiquette. If you were to use the word "bump", damn, you'd be chastised. The obvious answer is yes, it was onto hreset to get keys. That was posted here or on the ps3 hax thread. Bubba said it could be a week before any news comes along. I believe that was what he said.

Progress? Yes. I hope 99% of my post is received as it is intended; sarcasm. Maxternal posted right after I did about 3 cores running but linux seeing one. Interesting.
 
Is there a way to re-encrypt an Anacast image, specifically the System Menu?
Nope. It's encrypted and signed such that without Nintendo's private keys for that it can't be done to my knowledge.

I was kinda wondering, though, if the system menu would run unencrypted you were to were to save it as a separate title (assuming IOS only tries to decrypt something if it sees the system menu's title ID) or if you run it with a different IOS (assuming IOS80 always wants an encrypted title, knowing it's only supposed to run the system menu) either way, though, you would probably have to deal with the issue that the system menu and 1-512 used to run an unencrypted title would want to use the same memory addresses.

as far as autobooting the unencrypted version, you also might be able to replace the original system menu with a copy of 1-512 with an extra section added to the DOL to also write the new title ID into the right address so it will see it once it's done decrypting and load that title instead.

That's what's occurred to me thus far, at least.
sorry for asking this, but are we now a step further hacking the wii u?

If by hacking the wii u you're talking about getting all 3 cores to run together in a usable way, yes, slow progress is being made. At this point all 3 cores make it to the Linux kernel but it's still only using one of the cores to actually run stuff.
 
Nope. It's encrypted and signed such that without Nintendo's private keys for that it can't be done to my knowledge.

I was kinda wondering, though, if the system menu would run unencrypted you were to were to save it as a separate title (assuming IOS only tries to decrypt something if it sees the system menu's title ID) or if you run it with a different IOS (assuming IOS80 always wants an encrypted title, knowing it's only supposed to run the system menu) either way, though, you would probably have to deal with the issue that the system menu and 1-512 used to run an unencrypted title would want to use the same memory addresses.

as far as autobooting the unencrypted version, you also might be able to replace the original system menu with a copy of 1-512 with an extra section added to the DOL to also write the new title ID into the right address so it will see it once it's done decrypting and load that title instead.

That's what's occurred to me thus far, at least.


If by hacking the wii u you're talking about getting all 3 cores to run together in a usable way, yes, slow progress is being made. At this point all 3 cores make it to the Linux kernel but it's still only using one of the cores to actually run stuff.

Hm, is it possible to brute-force the key, or it's a waste of time?
 

Site & Scene News

Popular threads in this forum